Virus Name: Stanco
V Status: Rare
Discovered: August, 1992
Symptoms: .EXE file growth; unusual error messages
Origin: Eastern Europe
Eff Length: 7,529 Bytes
Type Code: PNCK - Parasitic Non-Resident .EXE Infector
Detection Method: F-Prot, AVTK, Sweep, IBMAV, ViruScan, VAlert, NAV,
Sweep/N, AVTK/N, Innoc, IBMAV/N, NShld, NAV/N
Removal Instructions: Delete infected files
The Stanco virus was submitted in August, 1992. It is originally
from Eastern Europe. Stanco is a non-resident, direct action
infector of .EXE programs.
When a program infected with the Stanco virus is executed, this
virus will infect one .EXE program located in the current directory.
Infected programs will have a file length increase of 7,529 bytes
with the virus being located at the beginning of the infected
program. The file's date and time in the DOS disk directory
listing will not be altered. The following text strings are
contained in the viral code, but are not visible in infected
programs as the virus replicates in a PKLited form:
"Insufficient DOS Version ... must be 3.2x or greater!"
"Write Protect Error \ Disk Full ..."
"Error in file .EXE"
Systems infected with the Stanco virus may receive unusual error
messages when the user attempts to execute infected programs,
such as the Write Protect Error message indicated above.